Cross site scripting

2010-05-0718:30:00

PRIOn knowledge base

www.prio-n.com

6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.4%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in SemanticScuttle before 0.94.1 allow remote attackers to inject arbitrary web script or HTML via the sort parameter to index.php, and other unspecified vectors, a different issue than CVE-2008-6113. NOTE: some of these details are obtained from third party information.

CPENameOperatorVersion
semanticscuttlele0.94
semanticscuttleeq0.92
semanticscuttleeq0.85
semanticscuttleeq0.90
semanticscuttleeq0.91
semanticscuttleeq0.93
semanticscuttleeq0.87
semanticscuttleeq0.86
semanticscuttleeq0.88
semanticscuttleeq0.89

Name	Operator	Version
semanticscuttle	le	0.94
semanticscuttle	eq	0.92
semanticscuttle	eq	0.85
semanticscuttle	eq	0.90
semanticscuttle	eq	0.91
semanticscuttle	eq	0.93
semanticscuttle	eq	0.87
semanticscuttle	eq	0.86
semanticscuttle	eq	0.88
semanticscuttle	eq	0.89